Static task
static1
Behavioral task
behavioral1
Sample
8d6c5e41b5978eebec79a007586d3173a41036dbbdf968b6d8b34500bfbfa77f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8d6c5e41b5978eebec79a007586d3173a41036dbbdf968b6d8b34500bfbfa77f.exe
Resource
win10v2004-20230220-en
General
-
Target
8d6c5e41b5978eebec79a007586d3173a41036dbbdf968b6d8b34500bfbfa77f
-
Size
5.5MB
-
MD5
910b6ef0dab9d1343ef842e827ce7fc1
-
SHA1
43272fa1044c2512e14c3dc10fe9229a6abaa167
-
SHA256
8d6c5e41b5978eebec79a007586d3173a41036dbbdf968b6d8b34500bfbfa77f
-
SHA512
661ce973afaa43db0ebd5358b1fd3bf76d0126bb33d7eb891ae58bf372e50edea43d63b9268c16dd4b1e791dac4dc63bd31e1e23ae9db670c18d6d34fc666a9d
-
SSDEEP
98304:Z9IM0cS276SCDSfgG4z7AMK0iDTKo+tr8Atg+wGgEeKthlj51j6JcpUkiof/jtFZ:Z9IMrzCDSZM7jVuUg+3ReKVdR6JcLf/5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d6c5e41b5978eebec79a007586d3173a41036dbbdf968b6d8b34500bfbfa77f
Files
-
8d6c5e41b5978eebec79a007586d3173a41036dbbdf968b6d8b34500bfbfa77f.exe windows x86
9fd07d55142f3c2018bbc42be2ec87a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
CharNextW
gdi32
WidenPath
version
VerQueryValueW
netapi32
NetWkstaGetInfo
olepro32
OleLoadPicture
ole32
CreateStreamOnHGlobal
shell32
SHGetFileInfoW
comctl32
InitializeFlatSB
wininet
InternetReadFile
msvcrt
_mbctype
comdlg32
PrintDlgW
winspool.drv
WritePrinter
winmm
timeSetEvent
oledlg
OleUIObjectPropertiesW
gdiplus
GdipGetPenFillType
oleacc
LresultFromObject
shlwapi
StrCmpLogicalW
dog_windows
dog_free
usp10
ScriptApplyDigitSubstitution
msimg32
GradientFill
Sections
.text Size: 5.5MB - Virtual size: 26.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE